Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File: qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier: y3Wvjj5PQ1QGB9DqP7hfIe+dXZNbkQ+SRPuqCnzkdqk=
Subject key identifier: A4:6F:02:71:39:EB:9F:5C:40:D5:3D:CA:4D:CD:9A:69:D7:66:32:7A
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 019CA8D8737CAC5014FE40AA3AFEAF491872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number: 13FA
Signing time: Sun 01 Mar 2026 10:01:23 +0000
Manifest this update: Sun 01 Mar 2026 10:01:23 +0000
Manifest next update: Mon 02 Mar 2026 10:01:23 +0000
Files and hashes: 1: 0EzmePks-egIiJdpcXeEPBWaiJQ.roa (hash: VNTL9T5egZkLrCiJmBLxazk1HQGTpK6/iS8WwNYTg14=)
2: 97p9ZUhGZG6kJjtKp2TuV47gh5U.roa (hash: x88qWTYqI0aG2w0GajPiY4NGO9pvbzLLCkLeMTUd2t4=)
3: AG_3AL0BiXNne_-iEtcT4CW3QFY.roa (hash: MXbxSxIompr7PTpUg8mtZo8EDK4eK9dEM10GngyQSBQ=)
4: R3GyXBYJhMHhgq5yrGVUK3jdnkA.roa (hash: g1FeF6e8PlISr+mSxj+h+WNftfc+dabb3ghrlPO9BE0=)
5: S1xGdMwCL7zcvvXwmIxBk0TUOII.roa (hash: Dt+ahUx8ad2ugzMhIwhEEjwNwt3G09wi3vOVTLugUWQ=)
6: XundD1ATPkgExkAuZ9fhY2EBgJI.roa (hash: +uqd1waFJ4ZIkhGQA2rPiPNb2R7bE9L91cSGBFAjyVM=)
7: p0lVyIeHUzTGYLAW5RWLMmU0VEI.roa (hash: RTQGUQH3DHZP7KXMTE9osS1yh94s1ux67e3vp2zT3Iw=)
8: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: AwzTykwApLb6Xrm+JCvFD5Q1cetjIqrAMpl184UM9+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:73:7c:ac:50:14:fe:40:aa:3a:fe:af:49:18:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Mar 1 10:01:23 2026 GMT
Not After : Mar 2 10:01:23 2026 GMT
Subject: CN=a46f027139eb9f5c40d53dca4dcd9a69d766327a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:4a:55:70:19:b7:8a:92:23:c5:9d:d3:a1:
b7:d6:79:8e:93:45:42:91:c4:24:cb:24:05:a3:03:
84:43:59:c5:97:16:af:ad:8e:e3:61:25:43:e3:64:
e2:1d:0a:b0:14:09:71:80:29:33:e6:97:1a:96:f0:
43:e3:1f:97:e2:d3:5e:d4:8c:44:51:20:a1:6b:e5:
88:45:c4:c3:2a:33:50:2c:ab:b3:08:a1:29:3c:0b:
6c:8d:43:25:b7:ad:1d:c3:0b:ef:31:3f:fb:f6:32:
61:70:79:1b:2b:bf:24:17:18:e0:9d:ce:67:d9:4e:
22:c9:68:d3:7a:06:49:c3:41:57:d5:c4:00:48:6f:
e5:e3:1f:0a:8b:d5:bb:d5:32:02:ce:04:97:0b:8f:
17:10:a0:56:a9:46:f3:24:da:dc:1a:59:42:86:6d:
5c:3e:bd:21:14:60:1a:01:61:0e:7f:f5:5b:f5:28:
8b:52:98:45:7a:42:98:30:bf:7f:9c:51:5d:2d:5d:
34:97:42:de:00:99:4d:db:37:09:11:e8:9d:4d:0c:
34:f8:10:b2:95:8e:a5:03:34:76:dc:62:ee:d0:1b:
60:b6:92:9e:e5:48:68:d4:36:cf:24:9b:19:95:89:
59:2a:53:4d:63:9c:31:4c:cf:aa:81:c0:f9:89:f0:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6F:02:71:39:EB:9F:5C:40:D5:3D:CA:4D:CD:9A:69:D7:66:32:7A
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4e:05:7d:bd:0f:6e:15:7b:2e:84:b9:09:45:e1:3b:af:26:
48:3c:56:5b:04:ad:cb:7e:1b:5a:98:05:cb:e3:56:c2:06:2b:
0a:53:dd:36:82:13:6e:a1:b3:43:63:4a:cf:90:e1:a6:bd:a8:
cf:de:00:ac:8b:92:dc:55:26:e6:f8:56:f1:b9:8f:7f:e5:31:
56:fd:c5:d0:d2:2b:5b:00:d9:13:44:fd:58:2c:44:a2:93:18:
fa:58:c3:2e:39:75:bd:e2:c3:14:ed:6a:71:e4:37:57:b9:f9:
54:05:29:fd:ec:43:89:e8:50:8d:a3:a2:41:48:63:50:09:1a:
79:fd:ba:fb:22:31:9b:be:7a:f0:0d:a3:0b:26:f1:e6:7b:05:
3e:fd:36:ce:75:6f:9f:a6:67:8b:a8:93:d2:ab:a4:48:c1:3e:
49:f6:00:88:a6:71:c5:a4:0d:97:cd:b1:c1:5f:e5:4a:da:53:
b9:02:81:b8:3c:1b:aa:2d:4c:26:27:30:b8:22:c8:49:19:ec:
dd:eb:f7:7e:4a:ad:db:62:d1:1b:73:23:e5:0d:4a:2b:3e:1e:
76:6a:e0:80:11:1d:4c:6d:0d:0e:f7:cb:df:ea:f9:ba:f0:a2:
cf:43:f7:7b:af:4f:e2:c2:13:6e:10:0f:87:16:39:cd:0a:80:
31:04:67:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:44 2026 by rpki-client